Fix org_name XSS path